$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66ae1927-8ff7-3212-9180-b040515d9adc.roa File: 66ae1927-8ff7-3212-9180-b040515d9adc.roa (raw, json) Hash identifier: 8DZhQR9n3EXHQAuj6skn1vq/KKkTGcDKbNnOebZchfQ= Subject key identifier: C5:E8:A0:E4:D1:32:94:87:5E:D5:84:48:7B:7D:DD:94:8E:56:90:C4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD7F81D2AB9E24609B6200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66ae1927-8ff7-3212-9180-b040515d9adc.roa Signing time: Thu 21 Aug 2025 17:32:44 +0000 ROA not before: Thu 21 Aug 2025 17:32:44 +0000 ROA not after: Wed 19 Nov 2025 18:32:44 +0000 asID: 31898 IP address blocks: 132.145.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:7f:81:d2:ab:9e:24:60:9b:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:44 2025 GMT Not After : Nov 19 18:32:44 2025 GMT Subject: CN=560ab0d2-9c42-444c-a83c-63b82218038a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:5b:9e:98:9e:13:1d:78:04:fe:d9:72:19: 52:52:f9:56:16:2e:c8:94:cc:ab:19:91:0d:d6:1b: 9b:64:e5:14:d6:10:ae:0f:c3:04:36:e9:4b:7a:cd: f4:6d:8e:15:7c:4a:66:4f:21:34:d6:81:f8:65:6a: 74:c0:f6:00:7e:48:1c:c6:3c:73:6a:34:7b:3a:b9: 57:03:bd:b1:65:35:09:ea:5e:87:87:62:90:ed:3f: ac:c2:14:ac:ef:67:97:ec:1a:7e:ff:92:bb:ff:4e: 72:a6:b6:fc:56:cb:07:ba:14:d1:7f:ff:f8:16:64: fe:61:c8:ba:cb:8f:24:1f:9b:25:24:9e:5e:b2:ca: f7:03:54:1f:1b:68:a9:0d:4e:64:d0:b0:4c:26:be: 80:c1:59:8f:8b:c1:3d:f2:0c:a5:93:35:2e:c5:d1: 97:82:53:16:b5:74:f0:95:2c:f8:5f:42:02:62:79: e6:76:0d:da:fd:35:05:2b:02:73:33:cc:e3:d2:77: d3:77:fc:ea:44:d3:37:81:b9:7e:77:8b:b6:5c:fe: e6:74:dd:9d:18:05:bf:c0:7a:03:5b:9f:4e:00:1c: 24:8f:93:cb:7f:cb:58:d1:64:2a:01:70:f7:e6:11: 9c:fe:4e:cc:6a:91:11:f3:a8:dd:47:08:43:8e:c2: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E8:A0:E4:D1:32:94:87:5E:D5:84:48:7B:7D:DD:94:8E:56:90:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66ae1927-8ff7-3212-9180-b040515d9adc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:10:83:14:99:05:fe:10:ca:14:48:6f:6b:44:33:f6:e1:99: b0:bb:70:d5:1a:83:e2:61:ac:94:8a:b3:d3:06:c6:0e:42:41: a2:0c:f9:62:3b:80:bc:14:21:ab:2f:3d:87:b7:02:c2:cb:f4: f5:2d:a1:3d:5c:c8:04:47:f4:de:6f:6d:f8:10:81:5c:2a:ba: a9:16:18:8e:3a:b0:e8:0b:f4:9b:94:a8:2c:6b:94:a9:49:43: 0e:3a:a7:02:d3:aa:35:6d:a6:06:06:07:66:79:a9:8e:42:bb: b1:03:dd:76:ca:32:11:fc:97:49:43:cb:1e:3e:d8:26:5a:40: 65:0c:6f:ad:1a:f3:40:39:7c:27:c7:de:4b:9e:ba:a9:d9:f2: 40:15:19:09:df:89:1e:f7:6c:92:3a:1f:0f:5c:72:fa:e8:dc: 46:af:40:7c:35:d6:96:bb:39:7c:3f:75:28:31:cf:82:8e:18: f9:3a:e4:c9:ee:3b:6d:4e:f9:50:e8:1a:d7:e1:49:06:5e:e8: e4:d0:99:13:27:5e:2f:71:a5:b8:4d:12:25:a9:3f:35:e7:67: 32:11:1b:00:c2:2b:63:4d:3a:37:18:56:3c:6f:05:10:1a:10: 44:4e:2b:dc:5d:63:df:21:1d:28:70:e5:83:c6:44:2e:42:71: b7:d0:48:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurX+B0queJGCbYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzI0NFoXDTI1MTExOTE4MzI0NFowLzEtMCsGA1UEAxMk NTYwYWIwZDItOWM0Mi00NDRjLWE4M2MtNjNiODIyMTgwMzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6pbnpieEx14BP7ZchlSUvlWFi7IlMyrGZEN 1hubZOUU1hCuD8MENulLes30bY4VfEpmTyE01oH4ZWp0wPYAfkgcxjxzajR7OrlX A72xZTUJ6l6Hh2KQ7T+swhSs72eX7Bp+/5K7/05yprb8VssHuhTRf//4FmT+Yci6 y48kH5slJJ5essr3A1QfG2ipDU5k0LBMJr6AwVmPi8E98gylkzUuxdGXglMWtXTw lSz4X0ICYnnmdg3a/TUFKwJzM8zj0nfTd/zqRNM3gbl+d4u2XP7mdN2dGAW/wHoD W59OABwkj5PLf8tY0WQqAXD35hGc/k7MapER86jdRwhDjsJN+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXooOTRMpSHXtWESHt93ZSOVpDEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjZhZTE5MjctOGZmNy0z MjEyLTkxODAtYjA0MDUxNWQ5YWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0QgxSZBf4QyhRIb2tEM/bhmbC7cNUag+JhrJSKs9MGxg5CQaIM+WI7 gLwUIasvPYe3AsLL9PUtoT1cyARH9N5vbfgQgVwquqkWGI46sOgL9JuUqCxrlKlJ Qw46pwLTqjVtpgYGB2Z5qY5Cu7ED3XbKMhH8l0lDyx4+2CZaQGUMb60a80A5fCfH 3kueuqnZ8kAVGQnfiR73bJI6Hw9ccvro3EavQHw11pa7OXw/dSgxz4KOGPk65Mnu O21O+VDoGtfhSQZe6OTQmRMnXi9xpbhNEiWpPzXnZzIRGwDCK2NNOjcYVjxvBRAa EEROK9xdY98hHShw5YPGRC5CcbfQSPE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:58 2025 by rpki-client